We have a situation that we are getting some error documents(grokparsefailure) in elasticsearch from logstash. I have deleted all those documents which are around 2million out of 90days data. This is going to be regular process with only few thousands of docs. Now I am wondering, its already more than few days but I still can not see memory is reclaimed. I have added "indices.store.throttle.max_bytes_per_sec" : "100mb" to cluster but no use. I have already tried forcemerge on 1month data and didn't try that on another 2months data. I understand that segments should merge so that deleted documents memory will be reclaimed. But When it will happen. Could you please anybody help me in this as we want to see reclaimed memory as early as possible. Thanks.
ES:5.2.1
Logstash:5.2.1
Kibana:5.2.1
Thanks @warkolm for the quick response. My intention is to disk size only. I have tried force merge on one month data. But I would like to know more about that automatic process like configuring any settings. May I know, is there any chance we can expedite that automatic merging. Thanks.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.